Security Feed
  1. Archives

May 12 2026 Shai Hulud attack ships signed malicious TanStack, Mistral npm packages

Source

Hundreds of packages across npm and PyPI have been compromised in a new Shai-Hulud supply-chain campaign delivering credential-stealing malware targeting developers. [...]

Posted by Bill Toulas on Tue 12 May 2026 in BleepingComputer.

Tags: Security.

Categories

  1. Ars Technica
  2. AWS Security
  3. BleepingComputer
  4. Brian Krebs
  5. Bruce Schneier
  6. GCP Security
  7. Google Project Zero
  8. The Daily Swig
  9. The Guardian
  10. The Register
  11. Threatpost

Tag cloud

  • Security
  • Uncategorized
  • Security, Identity, & Compliance
  • microsoft
  • Biz & IT
  • Security Blog
  • AI
  • Security & Identity
  • CryptoCurrency
  • google
  • Announcements
  • Artificial Intelligence
  • Foundational (100)
  • Legal
  • A Little Sunshine
  • Privacy
  • apple
  • Mobile
  • squid
  • hacking
  • Intermediate (200)
  • LLM
  • Advanced (300)
  • Technical How-to
  • The Coming Storm

Security Feed. Powered by Pelican and m.css. Code is available on GitLab.